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cluding the system or the metKcMj! Vaone enrfEiK^^^^ 
the system includes an alias source'addr.ess'generator 
that employs the destination address tbgeneraTe'the ali- 
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source address for the- real source address/This re- 
moves the real source address from the e-rnail message 
and ther'eby renders the' sender, located at the real 
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systems and methods for forwarding reply e-mail and 
filtering reply e-mait based on alias source address. 
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Description 

Cross Reference to Related Applicatioh / 

[0001] The present invention \s^?i\aXBd\6 that '^dig: s 
closed in EP-A-6855659:' ^' !i ! 



Technical Field of the inv^rttion 



[0002]"^' The^pres^^^ "^irected;^ ih^'^ge^eraL 

to computeV^netwbrks'^^frid^m^ .'to a"sv$- 




terin'g of incoming e-mafl ba^d. at feasf in p^^^ 
destinatidh address'btlrte e-^maiL';^"' ' j"*!",.;. 

Backgrou rid bf tHe I h vent Ion " [ 



75 



[0003] '-'In* recent years, the'avallabiiayjof^mor^. '^^^^ 
cieiil,'' reliable and^ cost-effecliye computers and ji 20 
workih g'^toois'has'a Mowed mahy cdmpanies and indiyid-. 
uals (colle'ctively;'"ljsers*') to become involved in an ey-^ 
er-growing electronic' community.' The immeasurable, 
gains'! n'tecJinblogy'exp'erienced by the computenpdMS- 
try overall have allowed these users to rely^on corritnerT' 25,. 
cially available computers, such as personal computers". 
("PCS"), to meet their infornriation process ing'and corh- 
munication needs. To that end, Pfc rnanufactu re rs, allow 
users to equip most PCS with ari interface (such as a .. 
modem) that may be used for communication over net- 30 
works, such as the Internet. The Internet is a vyell-knpwn:. 
collection of networks-(e:g.-. public and private Voice I'da- 
ta. video and multimedia netvyorks) that cooperate using, 
common protocols to form a worldwide networK qt net- ' 
works.' - [ / i .. . .. . . 35- 

[0004] C'odperatipn often Includes the cdmrh unlcat ion . 
of electronic nri^il ("e-hnail") from one user "(a "sender") 
to another (a "recipient"). One conventional e-mail pro- 
tocol employed over the Internet, Standard Mail Trans- 
fer Protocol ("SMTP"), rnahdatVs that each e-mail mes- 40 
sage body have a header that. ihcludes the sender's e- 
mail address (a 'source address") ancl the recipient's e- 
mail address (a "destination address"). All well-known 
e-mail protocols nriandate in elusion of a. source address 
to allow the recipient to send e:mairback to the sender, 
[0005] Privacy has become a primary concern in. to- 
day's computer-based society Users want to be able to 
express themselves in words,, sounds or pictures over 
a computer network, but may not warit to be identified 
as the source. In particular, users vyant to keep their true 50 
identity sedret, but stijl wish to receive e-mail addressed 
to them. This need for privacy spans the spectrum of 
communication, from business transactions to personal 
thoughts. Unfortunately, mandated inclusion, of the 
source address with the sender's e-mail gives away the ss 
sender's identity, compromising privacy. 
[0006] One solution to this problem is a so-called 
"anonymous remailer" An anonymous remaijer is a 



computer system, coupled to the -netyyqrk; -that allows 
bidirectional e-jnail communicatiDn ov^r^t he network 
withqiit cocnpromising the gender's identity. The recipi- 
eni&rinoXd'^^ identity of the sender unless 

thQ^sender jen^oses Jdem in the body 

ofjhe'e^^aU^message rtseif. . • 
^QOQT], ^ Anonynrious remaiiing is .well known-in the art. 
The. most famous [nternet/emailerjo d^ been the 
Finnish" "aripn.pengt^fi",TerpaM^^^^ at.rts zenith, 

toasted rrijorf .ttian;500,pOCX ^»ser%o .^c^r : . / . 
[60()8^,-.. To support bidir^|(?tional €^ailiDg,..convention- 
a^,relp^^ers J7},ust maintaip^a t^^ .tafele that cor- 

rejatescpal uspraddres.s^esanda^ source addresses 
(ukuaJLyf taking the 4orni -;)pooopc@remaiier.address''). 
Upon receipt of a message.f rom an anonymous sender, 
the remailer replaces the sender's real source address 
with a corresponding alias source address and remails 
the^fjiessage the intended repipient.The recipientican 
reply to the. message, biit only by usirig the anonymous 
sender's alias.source address. Upon receipt of a reply 
from, the .recipient,.. the. rernailer substitutes the. anonyr 
mous sender's .reaj source address for the alias.source 
address and remails the reply to the anonynrious sender 
[0.009]. The nriain problem with conventional remailers 
is the translation table itself. Because the table contains 
detailed real source, addresses and the correlations ber 
tween such real source addresses and alias source ad-- 
dresses, both hackers and law eriforcement; (agencies- 
covet it. Thus, the person maintaining the remailer must 
both protect the translation table from.hackers and face 
thorny Jega! questions about the privacy of-the senders 
who trust him to protect their true ideritity. . 
[0Q10] Even though a sender may preserve his ano- 
nymity by using an anonymous rernailer, he still may be 
subjected to receiving a barrage of unsolicited;, usually 
computer-generated e-mail ("junk* e-mail or'spam,'' in • 
today's Internet parlarice). because the sender still may 
be reached-via his alias source address. Currently, the 
only, automatic way to protect, against such unsolicited 
e-mail is to filter based on the source address contained 
in the header or specific words- contained in the body. 
Unfortunately, filtering based on ^source address or 
words in the body of the message is crude at best, risk-- 
ing both the unintended deletion of valid e-mail messag- 
es and unintended retention of junk. Of course, manual 
filtering remains an option, but at the cost of time. and 
with the risk of exposure to any offensive subject matter 
contained in such .e-mail messages.. 
[0011] Therefore, what Is needed in the art is an im- . 
proved remailer, a rnethod of remaiiing and a more ef- 
fective way to filter unsolicited e-mail -messages auto- 
matically. : .. 

Summary of the invention 

[0012] To address the above-discussed deficiencies ' 
of the prior art, the present invention introduces a sys- 
tem for and method of, generating an alias source ad- . 
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dress for arv'*effeetronic mail ("e-mair) "meisiagb having 
a real source idSress and a destination address^'ahd a 
•computer network; such' as the Interriet/tn'cludirlS^the 
systerrinor the fnethod/ fi^one erribodinrren^ 
includes an alias sdurce address g'en&'afer'^'aS'^eT'n^ 
ploys the destination address ta generWt§'^lt/"^liaS 
source address: the systeni further includes ari^i^l^'s 
source address 'subslitutor tffet substituted the'^'alias 
source address -for 1 he'^ teal -"sou rca'1iddre&^^^^ This P^-| 
moves the real source- £tddres^frcfrn tH§'^^ 
and thefetSy.^H-endeT^^ th^^sWftile^^^ if \h^k^ 

source* address;' ariSriymalis:'^^ 

eluded*' an e-rtiaif forwarder^ fl^^t-'rec^iVfe^ i^-m^'t^ a'd^" 
dressed-to tfieialias Iduffee addressrcbnr^^s trtereal; 
source- addres^^- and 'forwards -^^frfe 'e-mSrtcf ffie "f^af 
source addreSs. ' ■ '^^v ^""j 

[001 3] -The-sender is therefore pr6v1derdVvhh"a set of 
alias source addressies that nn'ay, in some-ei^ibbdihienris- 
of the present Invention, be uniqueYd 43ch d(9stiriation' 
address.' However, since the systehn autoftaticafly pro^*^ 
vides geheratioh* and-substitutibn'bf souVce-addfesses, ' 
the user is treed of the task of tracking rriultipTe alias ' 
source'^dr^sses. ■ ' ■ ' ^ . :c : 

[0014] 'In "one embddiment of the preserit ihvehtidfi', 
the alias source^ address includes ari Encrypted version 
of the r«al source address, among'bth^r information: in' 
this way,-' the e-mai^ forwarder ' can- Sdmput& thB r^l ' 
soupce address given the alias Tsbiirtfe add risss withoLt'* 
any "need for 'a translation "table^froiri alias" sdurce ad-^ 
dresses to real sbuVce addresses: ^Another advantage 
of this embodiment is that the alias generator does hot 
have to communicate with the e-mai! fbrwai'def/ TtiUs' 
the systerh may^cbmprise'any nurfifaer of aHas' genera-"* ' 
tors and any number of e-mail forwarders. Alias gener-' 
ators and'^-mail forwarders may b& added iand removed * 
from the-systiehr> at any time.' ' ' - ' ' ^ ■ ' 
[001 5] • I n • one • em bodimeht- of * th^' present* invention, 
the' system further includes an e-m&il filter^ capable of 
filtering incoming reply mail b'ased on the-alias'-source 
address. By-causing the alias source address to depend 
upon the destination address,- a single sehderckn have 
a set of different alias source addresses, allowing the 
sender to fitter incoming- reply mail, -if he so desires, 
based upon alias source addi^ess. Purveyors of junk e- ' 
mail can obscure their identity or the content of' an un- 
wanted messagiB by many means, but if they want to 
send e-mail successfully to that sender, they must ad- 
dress it to the sender's exact same alias source ad- 
dress. The alias source-address, when thus used as a 
destination address, provides users an effective way to 
filter junk e-mail and to determine, if they so desire, 
where the junk e-mail purveyor obtained the alias 
source address. 

[0016] The ability to filter e-mail based on the alias 
source address is independent of the particular method 
of generation of the alias source address. To allow e- 
mail filtering by this method, the alias source address 
should depend upon the destination address. The alias 
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source address generator may advantageously have 
one or more ofjhe following th^ee;attTib^tes;^^.) consist- 
ency (the same^atfe's' iS'preS6nt^di6ifhe~sarne "desti^ 
tioQ),^(2),unjcjuene^s]the,p twp des^ 

tinStibfis a're grven ^he sarne ajjais) .and (3). privacy (the 
recipient cannot determine the reai source address giv- 
en the alias source add[ressj.„ , , i : 
[0017] In one embodimem iof lfie"pr§sehV in 
the system takes the fprna qf.^^rerpote anonymous . re- 
m^ifef with v^ic^ the/sender n^^^ conrjm^unicate 6^,er a 
hbtWoVfc jrf an^^^ 'embodirnent.ihe'sy stern ex- 

eSjiSfes fo^^ thelenderis bornpujer 'Js^s'the'sendec 
geneVllese-m^ addressesar.e 
dfeteH^ineltf and aSlied.j'4!imTnatin^^ tp.rihe. r^-- 

mote anonymous remailer 
[0018] The foregoing has,outnnQc^, ^^tti.^.^^^ 
preferred and alternative fearures ofifre" jrr^semiriv^^ 
tion sqthatthose.skiiied in the art may better undecstaad 
the deiaiied descri^tio of the invention, that follows.. Ad-.' 
ditlbhai ffealu'resof^fffe inventioi;i will, be described here- 
iriiaher'thatjforr^ subject pf Jhe claims.pf the inven- 
tion . Those "skilled in the art .should.appreciate th^ttbey 
cktT * read! [y u se th e disciosed concept ion .specif ici 
erhbodirrient as a basis for designing or modifyingjothe/ 
strudture^ for carrying out*" the same^ purposes 51 the 
pre'sent ihvehtio^. Those skilled |n the ari.shou#atsp 
realize that such equivareni c riot dep3rt^ 

from the spirit arid scope of the inveotipriln its broadest 
form. ■ " 

Brief Description of the Drawings 

[001 &] ^or a" rripre compYete uncjerstanding of ".the 
present iiiventio'n, Teiference is now made to the follow- 
ing descriptions taken iri corijunctton.vyith.tl;je accojripa; r 
nying drawing^, Wherein like numbers desigriate like ob- 
jects, and in'' which: . *".. ' . / ' . 

FIGURE 1 illustrates'a high-Tevel block diagram of 
■ ' ah exemplary distributed 'ne^vo^k ^^ which the 
principles of the present invention may be suitably 
used; ^ ' * " " - \ 

' FIGURE 2 illustrates a bbck diagram of abomputer 
■ systerp that may be employed in the network of FIG- . 
URE 1 to 'provide an environment within vytiich the 
present inventibn can operate; 
FIGURE 3 illustrates a flow diagram of one specific 
embodirnent of a method of generating an alias 
source address for ari e-rriail rhessage having a real 
source address and a destination, address; and 
FIGURE 4 illustrates a flow diagram of one specific 
embodiment of a method of filtering unwanted e- 
mail messages based on alias source addresses 
and forwarding e-mail to the real source address. 

Detailed Description 

[0020] Referring initially to FIGURE 1 . illustrated is a 
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high-level block diagram of an exemplary distributed 
rietwork (gerterally designated 100) with which the, prin- 
ciples 'bf the' present iriyention may be suitably, used to 
provide an' anonymous remailer t^ without a 

translatio9:iabre"^.n(j assigns ^ 
as source addresses to a sen'derV eVijiallJ,!^^ 
uted 'rteitwdrk 'l 00. iliustratively includes a 'ply rallty^ ,qf 
computer systems^l'fpa^.llOb^^",^^^^ l.i.bV-I.IQf. 
1 1 6g; 11 Oh, 11 OJ tha^t are'-ilfustratively ^ 
to foVm thS rntemet "1 Ys. The" Internet 'l 1*5 Includes Vtxe 
World Wide Web, which Js.npt^a pet w 
an "atDstractipn"' 'mainlined on tpp'^of %e'j nterpet j'^ 5 
effected by a cdmb'inatjb'n of b>owke.r^* s%fVer,^ 
nhay be" hosted on the/p!.urality p^^ 
llOa/ tldb; 110fc,jfCi^ 

Hypertext Markup Lari ("HtM'U*), pages. and.the 

like. ■*"*■■ : . - l'. 'r.'^..r:'"!. 

[OO217' * ;^AIthoyghlheJJIustr^^^ embcKiirneniis'sultably 
Innple'mentecJ for and used over thei Internet , 11 5,. 'the 
principles and br^^^ of the present invention; m^^ 

be associated with^ any appropriately arranged compu: 
ter, commuriications, multimedia, or ,pther. network, 
whether wired or Wireless, Further, though tKe principles 
of the present invention are Illustrated using a ^single 
computer system, such as one of. the plurality. of oovnl 
putersysterns 110a, 110b, 110c,' 11 Od, 1lbe, llOf^^VlOg.. 
11 Oh. l l Oi, altejnate embodiments within, the scope *pf 
the same may include. more than'ai single computer sys- 
tem. ' 

[0022] . The exernp la ry .network 1 00 is,,assumed to'in-. 
elude a plurality of (assumed) insecure^com'munication 
channels thait opei-^te tp iritefcouple ones of the various 
computer systems, '11 Oa, It'Ob. IIOc^ llOd, 1l6e, ItOf. 
llOg. Ilbh, 'l'l0i;6f.the netvvork 100. The concept of 
cbmmuhicatiipn channels js, known and alioWs insecure' 
cdrhmunicat ion 'of information among ones of the inter-, 
coupled^cpmputer $ys^^^ Internet^ employs con- 

vent ibnaTpommunicatjpn' protocols, such'as SMTP, that 
are also known). A.distribpted network operating system' 
executes on at, least ^pme of computer systems ttOa, 
110b. 110c, Viod, ilOe, llOf, llOg, llOh, llOiand may 
manage the' insecure communication of information 
therebetween. Distributed network operating systems 
are also known. 

[0023] FIGURE I also Illustrates first apd second us- 
er^s computer systems ! 05a. 1 05b, which are assumed, 
for purposes of the following discussion, to be associat- 
ed with an e-mail sender and an e-mail recipient, re- 
spectively.' Thus, a sender may apply his real source ad- 
dress and a destination address corresponding to the 
recipient to a particular e-mail nnessage and send the e- 
mail message to the recipient via the network 100 and 
the second user's computer. . " 

[0024] The first user's computer system may be as- 
sociated with a particular computer system 110a (such 
association denoted by a broken line 1 20. The particular 
computer system 110a acts as a home site for the first 
user's computer system and a provider of Internet- serv-. 



[0025] THfnJPO now to FIGURE 2, illastmted is a Iplock 
^diagrsLfTi of-, ^at^ processing arid, storage circuitry,;gen- 
eraj|^^design^^d 200, that may.be employed inthe net- 
■^9fh'h ii^^^M^ *• proyide.anvenyironment. within 
whichjhj^pre^ent-ir)^^ can operate. The circuitry 
200 comprises.a processor 21 0,. vplati^e memory -220, a 
npnyoi^tije mass^ storage; unrt_230 and cpnrimunication 
circuitf}^-24p.^ ^ -.i -. a ™. ::\ ' 

10 iQb26f. J,tiedrc^uitry 200 illustrated, in flGURE^Zis In- 
ttepd^,^ .to^^r^present^a wide -^array^^pt? computing plat- 
fQt^s^.,Acppr^in 9!rcu.rta^?.2pp. rp^yrbe a maln- 

fiame^jpipicorpput^^ 9^ personal eomputej. ("PC"). The 
pcesent.inveritioo is,not limited-^wh^soeyer toia particu- 
Jar.i^f ss oUcpmputiog:Ptatforrn/;With .reference, back to 
FJ^UR.e 3 andcpntinuing reference to FIGURED, each 
of the. pjurajity-gt; computer. systems '11^ TiPb. 110c-, 
1 tod. 1 1 be, 1 1 pT-^y qg,':l 1 ph, 1.1 pi and the first and sec- 
pod user's corriputer systems 105a, 405b may. have the 

20' circuitry illustrated Iri FIGURE 2 associated/therewith. 
[p02T| - Jhe: present .invent ion m^y be embodied as a 
sequence .of, Jpstructions executable ^in the data 
processing and storage .circuitry,-200 to yield- an. alias 
source address generator, an alias source addrjBss sub- 
stitutor, a reaLsource address generator, a reai.source 
address subs;t;rtutor arid an .e-mail filter.a^ the present 
invention, provides.^. . , . : l r 

[0028] Turning novi( to FIGURE 3, illustrated is.aflow 
diagram of one highly speciflc.embodiment of a method. 

30 generally-destgnated 300, of geriieratjng an alias source 
address,for,an e-mail message having a reaLsource ad- 
dress and a destination address. The method 300 may 
be embodied in an ajjas source address generator 
[0029] It should be .stated at this point in the discus- 
es sion that the method ,300 is nothing morerthan one ' ex- 
ample of a wayto generate an alias source address! rom 
a-real source address. The present invention requires', 
none of the specifically-reaited steps.- -Instead, the. 
present invention requires only that the resulting alias 

40, source address depernd on the destination address. The 
alias source address generator may advantageously 
haye one-or more of the follovying three attributes: (1). 
consistency (the same alias is presented to the same 
destination), (2) uniqueness (the, probability is low that 

45 two destinations are given the same alias) and (3) pri- 
vacy (the recipient cannot.determtne the real source ad^. 
dress given the alias source address). 
[0030] The method begiris in a start step 310. wherein 
an e-mail message to be remailed Is received from a. 

50 sender at a remailer that operates according to the prih- - 
ciples of the present invention. The sender's real source 
address is read from the e-mail message and- cbrh- . 
pressed in a step 320 to ensure. that, the alias source 
address that results when the method 300 is complete 

ss is riot excessively long. Compression may, in the illus-- 
trated embodimerit, be variable-length compression 
that depends upon the character set used in the send- 
er's mailbox name, domain name and top-level domain. 
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The compression step is, of course, purely optional." 
[0031] ' Following corTipression, the merthbd 3o8'c6h- 
tinues in a step 330. whe~rein a hash v^fue of the'desti- 
' nation address of the efmail message^'bom^^^ 
means of \h6' well-^kribwn MD5 algorithm" The destina- 
tion address may be-the domain part of aUi^ation e- 
mail address/ or it rhay- be the- host- part ot^ a Drriform 
Resource Legator ("t5l=iL") of ^ WortrfWiBe- Web form 
that asks the user to provide an e-mail ad(lfres6:''Fr6jrTi 
the MDBtiasri value/ t\w5' n6nHoverlWppirigp6f^^ fieldS aVe 
obtained. In the inustFat6d%mboaimS^^^^ 
is two bits lofig afnd^fie 'second biPtielrfis 'elgfitfiit^fong^ 
[0032]-- "like''Com|Jress(orf' 'CornjDutatibn^of 'S'Rasli v^^^ 
ue is purely dpttorial; The -only' ii^h"portianf■asped^ 
step 330 is that-the alias source. add ress'fe'ca'u^^ 
be based on the destinattdn address of^tfie^-mafl'nies- 
sage. Modification of the destinatida^ address 4sr not re- 
quire to base the alias s'ource add r'es^ ilierebn (as viiil 
be seen beldw ih'the'description of anior^^ 
od)?- ^ ' s::-- n.- 

[0033] ''Next/in a step 340. n null' bytds ate appended 
to-the compresseGJ^real source address; where n e'c^iSal^ 
the value' of the first 'bit'field! Apperiding ther hull bytes 
obscur-es^the true length of the real source address/ Alisb 
in^the step 340,- the second bit field ife 'appended to a 
secret key stored locally in the rerhfeiler, thereby produc- 
ing an expanded secret key unique to the desitlnafiori 
address. While'app ending nuli byt'es obscures the triie 
length of the rfearsource addresis", appending is uhnec- 
essary:tothe broad scop6 oTthe pfeseiit-inventioh. 
[0034] Next," in a stepV350r the-- compressed real 
source address (with appended null bytes) is encrypted 
according to; tor exam pie,"the-Data€ricrypt ion Standkrd 
("DES") using the fexpanded^secret 'key unique VoYh'e' 
destination address as an encryptidri Rey/Multipie DE'S 
passes may be employed fmlher td enh^nce security/ 
[0035] Of course, the typie of enefyption applied is Dn^ 
important. Ericryption doe^ ne^d not to be DES and- 
does not need to be symmetrical, fh fact/ the present- 
invention does not require- encryption whatsoever 
[0036] :Mext, in a step 360, the seconcJ 'bit field ^s ap- 
pended to the encrypted compressed real source ad- 
dress. The result is passed through an m-base conver- 
sion (m being any desired number) to obtain a desired- 
string. For a printable alphanumeric string including both 
uppercase and lowercase characters, a base-64 con- 
version can be used. If only lowercase or only upper- 
case characters. are desired, a base-32 conversion can 
be used.. • - . . • . 

[CX)37]. The method 300 ends in an end step' 370, der- 
ivation of the alias source address having been accom- 
plished. As with all of the other steps 310, 320, 330, 340, 
350,. the step 360 is unnecessary, unless the desired' 
result is an alias source address consisting of a printable 
string of characters.' 

[0038] The alias source address may then be substi- 
tuted for the real source address, perhaps with an alias 
source address substitutor. 



'10 



[0039] Erhploying the above-described .exemplary 
methbd 300 to ah' e-mail message having a real source 
addrdss'^of/ for^examj^^ and 
adSstin^ifiBrt;^a3dfess pf/"www. be cbn- 

verj^^dlo^y^bn^ This can be 

j^i'e-^ppendecf^^^^ nafne aridiop^levei dipmaln 

cif^^^'^'aSi^^ ' '^jl6rnp\^^^ tp yield: 

;^Orrfq nJDE^^ 1 pwaVcdrh':, a "desti-, 

Hi^tion-kcircS'^^'s-Spi^^^ alias $6urce"ad- 

bf "Em^fVoyij^g'^Mess cdrh^^ method, wherein the 




tfiftSr^'nt jesbff s . Fbr ^xl^i^'pre" ah Je-maiT ifqes$age Ha~v- 
iiig( ' ^ a' ' real 'soured . . address , pf ,/ [i6i[\ .example, 
•tdoiibar^' ben- labs .com* and a deStrnatibn address ,0 
"www. yah 00. conn" can be converted lp/|oQ_bar^bel'K 
l&6s: cdm : w^vviTysihdb. com " ( noth in g more .th'an,a4'ri vial 
Itf i n^ concat#Hat ion ) . fh is can be/ p re-appended ^to th.e . 

20 doffi^in* nafrie' ahcffep-levei domain of an* exemplaryje-/ 
maTfer ' to"" ''yfeld' "wVw.yah6o/com.fpb_b^ * 
cbm'@Vpwa.bdhr»\ This far i^ss complex (arid less. |e-^ 
ccfi'e)'meth'bd f&lls well within the broad scope of the 
pr&s€lit^irrt>emion, as Well. Note that 'the sre^3;set fprtK', 

^5 in the rhet hod 300 are' ft ot e mp loy ed In ,the ie^%fc6mp lex' 
method.' ' ' ' ' . 
[6o4l] '"Several things' regarding the.afove^escribed'. 
method 300 should b^ noted. First ;Hhe secret key* is the 
only data required to be stored at the rernailer site...AII . 

3d of the remainirfg-data are contained in the e-mail rhes- 
sag'e itself.' Thus; the translation table; of conventional^ 
rerhaiters is avoided. The isecrit/key pari/jn fact, be. 
compiled into the software that dbnstitlJte5:;the remailer. 
[0042] "Second, many World Wide "Web sljes impose' 

35 limits on the length of an e-mail abdress/they ;'^ll,acc§p^^ 
in a form. ' Since th 6' method' '300 'produces^ alias" 
source address that is longer than the" real source adr 
dress, the real sdu rce address* is 1n it iaily compressed to 
reduce the extent to which the length/of the alias source^ 

40 address exceeds the length of the/ real source* address. ' 
Should certain sites truncate the resulting alias source 
address, reply mail employing 'the truncated alias 
source address will be lost. 

[0043] Third, the nuniber of distinct destinatibn-ad-^ 
46 dress-specific alias source addresses generated tor the 
same real source address is limited to tWo to thei power 
of n, where n is the total length of the bit fields computed 
in step 33t0: In the illustrated embodiment, the number 
of destination-address-specific alias source addresses' 
so generated for the same real source address is 1024. 
This should prove adequate for most purposes. If the 
second bit fields were longer, the alias source address 
space would correspondingly increase. However, it 
should particularly be noted that the resulting alias 
55* source addresses remain unique to the sender, even if 
they do overlap destinations. 

[0044] Fourth, the above-described method 300 em- 
ploys DES/ a well-known secret key encryption algo- 
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rithm that cpnventionally operates o,a.a.56 t>it key. Since 
eight of the bits come from the second bit fiefd, the secret 
key is 48 bits.'fongV It en^jryption. stronger than effective 
48 bit pES is desired, my ltjple D.E^^ p^ be used. 

[0045] the st6p isO of the above' described"method 
300 may ernpJoy^qtherjS^mm^tric epcrypiijgi gl^^ 
such as IDEA.^prian ^syijinaet^ric^eQcrypj^^^ 
such RSA, infte^^d pt6E$.^^,urt^^^^ 350 
of tHe above descfii^^^ 
one-way hash f unctionsrsuch as SHX/inste^ 
Also, the stepsj3J0, 320, 3pp,.34P.35j0,^60,q^ the meth- 
9d 300 rnay perforrTie'd in ajiyj^f^^i^.j^^^ or per- 
formed multiple t'im^'sr.fas',rT>ay^^ to de- 
grade" or ehharice security^ anonymity, sp§eci or com- 
plexity or to accommodate other design considerations. 
[0046] ^.. Finally. lshoyjd^be.nQte,d tTjat th^ n;iethpci 3qq 
is'f ully /ever^^^^ an alia? spwrce. address (ysu- 
ally! c6nitain|id ,in a, rejDly^ejrmai'l) to^.be trapslat^.back 
into a real source address for forwarding ^agk„to the 
original sender. This is accomplished by reversing the 
rri-base conversions .stripping the .secpnd i^jt fjeld, de- 
crypting Yormultiply\dec^ us- 
ing the stored s^etcret kQy and appended seconcibit field, 
strippinglhe nylj b>Jes\and, 'f\na\^, decompressing the 
result to yjeld re^jf source address. Il^shquld be un- 
derstood, however, that the present invention is not lim- 
ited to reversible methods, and. can be made onlyip sup^- 
port u nidi rectionaLr^nnai ling. . 
[0047] Turning.now tQ.FIGURE 4. illustrated is a flow 
diagram of one embodirnent of a method, generally des- 
ignated 400, of filtering "unwanted e-maiL messages 
based on alias source addresses and forwarding e-mail 
messages to the r^t. source address. The method-400 
may be.qarried but in an e-mail filter. The described . em"- 
bodiment.Qf. the e-mail fpnwarder corisists of Jhe real 
source address generator and the real.source address 
substituter. 

[0048] In one embodiment of the present invention,, 
the systenri further includes an e-mail filter capable of 
filtering Incoming reply, mail based on the alias source 
address. By bausirig the alias source address to depend 
upon the destination address, a single sender can have 
different^aliases. allowing the sender. to filter incoming 
reply mail, if he so desires, based upon thealias source 
address. Purveyors of junk e-mail can obscure their 
identity or the content of an unwanted message by many 
means, but if they want their e-mail to be returned suc- 
cessfully to the sender at his real source address, they 
are constrained to use exactly the same alias source 
address, thereby providing an effective basis for filtering 
junk e-mail and determining, if they so desire, from what 
destination address the purveyor obtained the alias 
source address. 

[0049] At. this point, terminology can become confus- 
ing, because, in the context of a reply, the recipient of 
the original e-mail message originates a reply e-mail 
message and thereby becomes a sender in his own 



right. Accordingly, to reduce the confusion, the recipient 
will continue to be called the "recipient" and the sender 
will aqtntiriue to be called the "sender," even: though it is 
yr^|rstpod.tl3at.the rqply e-mail is traveling from the "re- 

f cipient^^to tl^jeu,"^nder.; ' ^ - ■ , • - 

[0050]' Accordingly, the method 400 begins in a start 
step,41,Q and-^prpceeds to a step 420, ^wlfierein a reply 
|7giaili,fjness99f Js./ecei\;e ,the,;/ecipient The 

method AOO corijjmue^^i^ the alias 

10 S9U£cg3fiq|ces^-,iSr^ead^f^c^ p^rnaW message. 

Nej>(^ '|hJ^ ali^^ f^o^jipared to alias 

source addresses contained [rvabsendeifj-supplied list of 
rejected alias source addresses in a decisional step 

If ' JW^f §','^s.^oVfC© address nratches" one of the 

iJ^^jETis.anJif -Ji^d(t3kin 

5f^ii^l%,reply e-mail is delete;)., and the sender 
spared of its receipt. If the alias source addretss does 
not match any of the items in the list (taking the NO 

2p ^ranch.oUhje clecisipnai.&tep 440, the, method continues 
iQ.^ stef) 45Q^yjrtierjBinlhe sender•^s r^ source address 
is jderived.(perhap€i by ri^yersipg the exemplary .method 
300 described above or perhaps by way of a real source 
address generator that generates a real source address 

2f from an alias sourcp. address) and s.ubstitutedjnto the 
rep[y e-mail, tor the alias source addreiss, - perhaps by 
wayj of ^a^r^l soyrce address substitutor. , - j. - , 
[0052] Next, the reply-e-mail is fonwarded.tpthe send- 
er in a step 460. The method ends in an end step 470, 

30 filtered forwarding haying been ^ccompHshed. - ~ 
[0053] As with the method. 300;; Jhe, steps 410, 420, 
430. 440, 450, 460 of the method 400 may performed 
ir\ any order, omitted or perfjormed nriultiple times, as 
may be appropriate tp^degradevor enhance. security, an- 

35. onymity, speed or complexity or:4o accommodate other 
design considerations. . 'v. 
[0054] in an alternative method to the.aboye, the re- 
mailer can simply move the aljas source addresses of 
reply e-mail to a field in the header or to theibody of the 

40 reply e-mail and fonvard the reply e-mail to the sender 
without filtering. ^he sender's. e-mail client program can 
then filter the e-mail based upon criteria the sender has 
supplied. . - , ^ - . . 

[0055] Because the alias spurce address is keyed to 

45 the destination address of the-sender-originated e-mail.' 
the sender can filter incoming reply e-mail destined for 
a particular alias source. address and be assured that 
his other alias source addresses are unaffected. The re- 
cipient has no leeway to alter the alias source address 

50 if he wants the reply e-mail to be delivered to,the appro- 
priate sender. Thus, unwelcome reply e-mail cannot dis- 
guise itself. ..^ . 
[0056] Although the present invention has been de- 
scribed in detail, those skilled in the art should under- 

55 stand that they can make various changes, substitutions 
and alterations herein without departing from the. spirit 
and scope of the invention in its broadest form. ... 
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Claims "'v.-L '-'. . :^ . • , . • ' ; 

-1 . "A system for generating an alias sdurce"'address'fbr 
an electronie mail mesis^ge haying a teai-sbo Ire ad- 
dress and a destination addressZ&nlibVlsihg: '^''^'' s 

r an altSs source address* generator arranged to 
■ erTiploy^said''destinatfc!ii address'tbygenerate 
said'alias sbur'Sfe address^a^^ 
? an alias source'^ address^ ih's'erfe'i^atrfahged td id 
■y 'pl^ce'said aliais sburee'^addr erec- 
- - trdiiie'iriairmessag^^^^ L':v^'>:5bc-3 

2. The system as recited in Claim 1 wherein said af\ks 
* source %"8d r ess -generafo? emp'Ioysi 'a* r^a! s'oume- 
address of said erectrdnic' mail nl^issage' arid Vafd- 
destinaiiorf; address to generiSte' s^a^d^a^ias'■sburdb• 

^^addfess^- ■ ^--■■"^ "^''^ cj; V- :.c-'. \< 

3. - Th6 system'as recited in ■Claim" 2* wherein s^^ 2& 

sburce' address 'generator 'compresses said real 
sou roe address to gen e rate sard ■ kl ias' sou rce'-ad- 
-dress; - . ■ -r'- • 

4. ■ Th e "'syste m * as ■ rec ited" in ariy ' of th e ■ p receding ' ^ 
- ^claims "wherein said alias source add ress^generator 

employs a secret- key to'-genefrate'said alias sburce 
' ^address. ' ' - •= - -'^^ ^ ' ^ ' • ^ 

5. The systeni "as recited ' in any of the preceding -30 
--claiirts further comprising: - ■ * ' • '--^ '"^^ '-^i 

i-: V a reail source address generator arrangecf^tb 
" ^ ^ ^generate a real^ source' addrei^s f rorh said'alias" 

source add^ress; and -~ ' '-•■^ ''^^ ''--^ ..c tit-: 35 
a real source address inserter.'doupie'd-tb'said 
■ = : real source address generator, = 'ar rang ed^*to 
•. - place said real sbarce^addi-ess in s^id fe'lectr^^^ 
4c mail- message. :i "-; ^ j ^ ■■. 

6. ^ The system as recited In^Glalm 6 wherein saidieal 

source- address irisert^r is' arranged- to= substitute 
said real source address for said alias sou foe ad- 
- .dress/ said real source address generator and in- 
"serter capable of cooperating to allow electronic 45 
mail'directed to said alias source address to be rout- 
ed to said real source address, said system func- 
tioning as an electronic mail forwarder 

7. The system as recited- in any of the preceding 50 
claims wherein said alias source address is longer 
than said real source address. 

8. . The system as recited in any of the preceding 
. -claims further comprising an electronic mail filter ca- - 55 
pable of filtering incoming reply mail based on said 
alias source address. 



9. The sys*teim "*as recited irn any of the " pi-eceding 
' - claim's wherein said alias source' address, ihsefter 
• ' is' arrafi'getf to su&stiJute said ajias sourde^addres^ 
" %r sald rWai'feurce 'aci'd saicf real source ad- 
dress being removed from said message. , . . ^ . 

16: ' A* rehiSifer foFcoUpJing tjo^atMeast'one^o^ a plurality 
^Y^^f ^9g{y^piJteV^ a -cdnnpulef ne\}^^ for 

'^'^'^ geriefating *an alfgis'isbuVce" address fon and Yemail- 
" _ ing, an eleclroniQ mail messape, comj^risirig; 



3CM 



■ '^asysj^Bhn'as^ recited in CiaTm' 9>hd;;^ 
-icq 'i. &ata''tfarilmissiorf circul^^^^ said 
-e:: o.r ^^fectronleiTiall rii-^ss4Se td saiid'deistlnatibn ad- 



tl-; -'A 'method of genefatfr?g"an'6lias source address for 
' -"^ an electronic mail message having a real source ad- 
^"^dreissi and a destination address, cqm^^ th^ 

---"sifeps Of: -^^ ■'^ ^y. \ " 

.... - generating '^a id; alias Source addresis Ba^ on 
" - ' said d^stinatibh address ; "and ' . f 

. r - stjbstftutTng said affas sburce ^ddrdss ior said 
- ^ ' real source dkJdress, wherein said Veal source 

' • address is rembvetffrom skid e-mail message, 

12'.*" The method as recited in Claim 11 whe'^reiri said step 
of employing comprises the step of employing a real., 
' sburce address of said e-mait message and said 
destination addrBSi5''*ta generate said alias sourbe 
^dress:'*^ ' - "'^^ * ' 

1^:"T1ie''nn(Bthod as tecited in' Clatrri 12 wherein said' 
' -^tep'of employ ingf com*[jrises the step"of compress- 
'^"Ing said real source address to generate said alias 
'-sobrce address. - c , -.^ • 

14. ' The method as recited in any of claims 11 to 13 
■ • wherein said step of employing connp rises the step 

of ' employing a secret key tb generate saiid alias 
• '^source address. - 

15. The rhethod as recited in any of claims 11 to 14 fur- 
ther comprising the steps of: 

generating a* real' source address from said ali- 
- - as source address; and 

substituting said real source address for said 
alias source address to allow e-mail directed to 
said-alias source address to be routed to said 
real source address thereby to fonward said e- 
nrail. 

16. The method as recited in any of claims 11 tb 14 
wherein said alias source address is longer than 
said real source address. 
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17. The method as recited in any of claims 11 to 14 fur- 
ther comprising the step of fiJtering incoming reply 

mail based on said alias source address. > ] ^\ 

18. An elec^i'onrc mail message, comprislrig: s 



a destination a^ddfess; and " r 

an alias source address bas^d on said destina^ > - > - * v .i 

tion address. 'H' ' '"V C ' > W 



tern is embodied as an anonymous remailsT:- 



23. The system as recited in Claim 21 wherein said sys^ 
tern is operable on an e-mail sender's computer." *' - 

24. A meth<iJ of -generating an electronic mail m^es* * 
sagev^^id method generating a message as recited 30 
in any of claims 18 to 20. ' • - - • 

-25. The method as recited in Claim 24 wherein said 
method Is carried out in an anonymous remailer. 



26. The method as recited in Claim 24 wherein said 
method Is carried out in an e-mail sender's compu- 



ter. 



35 



40 



19. The message as recited injClaim l^-wheretrr feaid/'*^.^' h\^\ ^ 

alias source address is a function of ssaid destin^idn / \ \ I „2«\./Ji.J 



address.' v.™^.^.^ S.,^ ^«v--^ ^ 

j X^^* r 7 

20. The message as recited in Clailn 18 wKerein said! is / I 

alias sourte address fis''furtherli)asecJ-;on; aS — ^ ^( > : \ "-7-'/\ y ' 

source address of said message. " '"^-J \ X, ' '^^-J.y' / \ . ' 

21. A system for generating an-^lectrorjic mail n^es-,— 

sage, said system being arranged to'^genprate a} \ ^ . ' \ 
message as recited in any of claims 18 tp '20 ' 

\ \ ! ; 

I ■ . / \ 

22. The system as recited in Ciairn 21 wherein said gys- 
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